Re: [LARTC] IPP2P v0.5 not working (but now is) and more...

Re: [LARTC] IPP2P v0.5 not working (but now is) and more...

[Leandro Andrade Travaglia]

[-- Attachment #1: Type: text/plain, Size: 3904 bytes --]

Thanks a lot...
Well, let's try again
I'll put here step-by-step what i'm doing.
I'm logged on as ROOT, ok? Let's go...

service iptables stop
cd /home/files/ipp2p/0.5b
iptables -V
    iptables 1.2.7a
vim Makefile
    i edited the file to:    IKERNEL = -I/usr/src/linux-2.4.20-8/include
                                     IUSER = -I/home/iptables-1.2.7a/include (i have downloaded iptables 1.2.7a sources)
                                    NETFILTER_VERSION = \"1.2.7a\"
make
    no erros
rm /lib/iptables/libipt_ipp2p.so
    remove regular file? YES
cp libipt_ipp2p.so /lib/iptables/
iptables -m ipp2p --help
    returns the help of the mod
rmmod ipt_ipp2p
pwd
    /home/files/ipp2p/0.5b
insmod ipt_p2p
service iptables start
iptables -L FORWARD
    RH-Lokkit-0-50-INPUT all  --anywhere    anywhere
iptables -t filter -I FORWARD 1 -p tcp -m ipp2p --kazaa -j DROP
iptables -L FORWARD
    DROP    tcp   --    anywhere    anywhere    ipp2p v0.5b --kazaa
    RH-Lokkit-0-50-INPUT..................

But now KAZAA can't connect - It's working fine...
Maybe i did something wrong, or the general rule --ipp2p isn't working for me.... but i believe that i did something wrong - sorry... anyway, thanks a lot.... Looking forward for IMESH and SOULSEEK support....

Now i have a few questions....

1 - it is stable for me to use the --bit and --apple? Can it crash my box?
2 - When i try to use ipp2p.gz, the shellscript to automatically start an IPP2P setup using two network interfaces, it return the following:

Starting IPP2P  ... iptables v1.2.7a: Unknown arg `--restore-mark'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.2.7a: Unknown arg `--save-mark'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.2.7a: Unknown arg `--set-class'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.2.7a: Unknown arg `--set-class'
Try `iptables -h' or 'iptables --help' for more information.
done

What is my problem?

3 - Does this shellscript really control the bandwith consuption by the p2p programs?
Why, for exemple, the wondershaper have much more "rules" and details?




    

  ----- Original Message ----- 
  From: miller69@gmx.net 
  To: lartc@mailman.ds9a.nl 
  Sent: Friday, March 12, 2004 8:25 AM
  Subject: Re: [LARTC] IPP2P v0.5 not working and more...


  Hi,

  I got the time to use an equal setup like yours to test the drop rule.
  > NOTHING HAPPENS - Kazaa can download files again....

  Well, i grabbed KaZaA lite (K++) today, installed it on my system (wich is
  connected to the internet trough a NATing router). IPP2P 0.5b was working
  perfectly fine, I used the following rule to test:

  iptables -t filter -I FORWARD 1 -p tcp -m ipp2p --kazaa -j DROP

  I could not download any more and iptables output looked like this:

  Chain FORWARD (policy ACCEPT 31525 packets, 1506K bytes)
   pkts bytes target     prot opt in     out     source              
  destination
     11  4780 DROP       tcp  --  *      *       0.0.0.0/0           
  0.0.0.0/0          ipp2p v0.5b --kazaa

  Removing the DROP rule let me download files again.  So make sure that
  you're insmodding the right ipt_ipp2p.o and that your DROP-rule is in the
  appropriate place. I'll look at IMESH and Soulseek tomorrow.

  Regards

  -- 
  +++ NEU bei GMX und erstmalig in Deutschland: TÜV-geprüfter Virenschutz +++
  100% Virenerkennung nach Wildlist. Infos: http://www.gmx.net/virenschutz

  _______________________________________________
  LARTC mailing list / LARTC@mailman.ds9a.nl
  http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/


  ---
  Outgoing mail is certified Virus Free.
  Checked by AVG anti-virus system (http://www.grisoft.com).
  Version: 6.0.620 / Virus Database: 399 - Release Date: 11/3/2004

[-- Attachment #2: Type: text/html, Size: 8511 bytes --]

Re: [LARTC] IPP2P v0.5 not working (but now is) and more...

[miller69]

Hi again,

> iptables -L FORWARD
>     DROP    tcp   --    anywhere    anywhere    ipp2p v0.5b --kazaa
>     RH-Lokkit-0-50-INPUT..................
> 
> But now KAZAA can't connect - It's working fine...
This is surprising as "--ipp2p" is a shortcut for the options "--edk --dc
--kazaa --gnu".  I've tested the current version and both (--kazaa and --ipp2p)
block any downloads in kazaa for me.

> Maybe i did something wrong, or the general rule --ipp2p isn't working 
> for me.... but i believe that i did something wrong - sorry... anyway, 
> thanks a lot.... Looking forward for IMESH and SOULSEEK support....
I'll send you the next release off-list in a second. Please come back to me
with any comment if it's working etc. If it's fine I'll put it on the
official website.

> 1 - it is stable for me to use the --bit and --apple? Can it crash my 
> box?
Not stable is meant as "I'm not 100% sure if I don't mark anything else than
the p2p-networks". It does not mean that it can crash your box. 

> 2 - When i try to use ipp2p.gz, the shellscript to automatically start 
> an IPP2P setup using two network interfaces, it return the following:
> 3 - Does this shellscript really control the bandwith consuption by the 
> p2p programs?
> Why, for exemple, the wondershaper have much more "rules" and details?
These scripts are just examples how IPP2P is working on my firewalling
bridge box. They're not meant to run flawlessly on your computer without any
adaption. Have a look at them, find out how it's working and add the important
things to your current setup/scripts.

Regards

-- 
+++ NEU bei GMX und erstmalig in Deutschland: TÜV-geprüfter Virenschutz +++
100% Virenerkennung nach Wildlist. Infos: http://www.gmx.net/virenschutz

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/